Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
File: jhF58KNc8HwWKWcmYoZsoAH3W9M.mft (raw, json)
Hash identifier: aNreM5LARmV6ImGWGU2pRakUP+TgXEDbGOPYsO66PyE=
Subject key identifier: 4B:33:35:8C:91:AD:BA:0F:FF:5A:EC:2F:38:27:02:C7:AD:E3:B2:50
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial: 019F11F7F17686ABB912AFE0CEC50BE09FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
Manifest number: 0A9B
Signing time: Mon 29 Jun 2026 06:01:29 +0000
Manifest this update: Mon 29 Jun 2026 06:01:29 +0000
Manifest next update: Tue 30 Jun 2026 06:01:29 +0000
Files and hashes: 1: THMUwp1z_8yM4YT3tCOSI8jHXpc.roa (hash: Lr+q9lzNVfojfVbAAoJyDVcA+Kbg/x3ZRCV9JR35aYs=)
2: g1S-kxOnMbzdndrLbUeaCJYPOxw.roa (hash: jkv9kYNLwqMU1Z9MYM3vG7XQkKfgh1lByWmby4H5OPY=)
3: jhF58KNc8HwWKWcmYoZsoAH3W9M.crl (hash: UWIhbc7jqgDmDXAre+JMkdWYCrshLHysTqa6Egh6XdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 06:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:f1:76:86:ab:b9:12:af:e0:ce:c5:0b:e0:9f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Validity
Not Before: Jun 29 06:01:29 2026 GMT
Not After : Jun 30 06:01:29 2026 GMT
Subject: CN=4b33358c91adba0fff5aec2f382702c7ade3b250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:56:05:d3:a8:29:ef:86:c1:d5:27:0a:38:
01:0d:48:15:64:2f:53:f8:3a:ab:00:e6:40:5f:e0:
a0:f1:d8:2a:ed:0b:36:28:7b:c8:f8:48:98:d8:db:
eb:cf:15:11:a8:8d:12:be:52:69:08:e8:ab:6c:90:
66:ea:bd:9e:0c:69:7e:2f:1d:6a:88:52:2a:2d:48:
a8:ac:e2:cc:18:d7:bb:26:0c:bb:40:6e:98:8d:41:
ee:d0:bc:20:d3:78:d3:89:a4:cd:30:dd:8a:13:d8:
1f:fa:08:b1:43:af:c9:0f:bc:be:fc:e3:03:39:32:
0f:71:11:05:7f:7a:1a:b2:48:26:81:70:20:70:e9:
2e:24:18:0b:1b:6b:d3:3d:25:9a:13:f0:6f:c5:46:
ac:2f:b3:20:e5:33:d6:31:ab:78:73:91:97:24:2b:
9f:5f:13:fd:06:62:f0:4c:cb:ec:a6:0b:78:84:e3:
1d:d8:56:1a:aa:d8:df:37:4e:c6:b6:b1:28:b7:1e:
ce:83:33:a5:1a:9e:35:29:2c:28:e2:1e:0e:15:4d:
9e:e0:ac:7c:03:34:ff:86:f1:db:ee:03:9f:44:4b:
bd:fb:d3:b9:06:f3:b9:fa:87:fd:12:86:66:4f:62:
63:d5:a9:10:38:54:13:26:c5:59:47:65:c1:a0:32:
bc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:33:35:8C:91:AD:BA:0F:FF:5A:EC:2F:38:27:02:C7:AD:E3:B2:50
X509v3 Authority Key Identifier:
keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8a:6a:b3:3d:4b:a2:b7:dd:4a:3c:b4:e7:f6:a5:a2:70:4a:
df:e9:2d:eb:54:a1:e1:5d:0e:c1:7c:3d:81:1f:35:d9:f5:8d:
6d:25:c7:96:a7:32:bb:39:5c:ff:17:ea:57:12:1f:c1:bb:80:
c9:fa:27:a4:84:11:01:a6:82:3b:7f:36:fb:22:5e:f2:e3:c7:
c6:80:06:16:79:d6:2a:68:ee:a6:09:98:e8:df:e5:79:e4:71:
71:48:1a:fa:5d:66:30:3d:fe:ab:35:93:3f:56:e1:bf:bf:5b:
8d:6f:60:06:8e:58:41:02:d1:51:59:c1:7a:0e:d5:0a:d7:0b:
53:ec:e6:38:9d:98:56:6a:fa:81:73:cd:62:ab:d6:ae:c1:b8:
81:98:e4:c1:de:37:72:f2:f3:27:92:33:56:dc:5e:3a:11:79:
e2:6d:9c:ff:67:1d:84:6a:f1:3e:3e:d6:ee:97:74:4c:69:ac:
b9:c4:66:60:e1:9f:03:ef:2d:23:da:1f:85:6d:7c:a9:72:8c:
3e:ef:3d:4c:c4:6a:e6:a6:ec:73:63:d9:58:aa:b7:7a:b2:71:
2a:fb:9f:87:36:e9:73:d7:8f:1e:e2:c5:53:d8:0a:d6:04:02:
9e:ac:7a:db:be:49:a8:19:03:52:af:f6:ad:4b:fb:e3:15:26:
a8:39:95:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:45:49 2026 by rpki-client